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Abstract 

In this paper, we address the scheduling problem of multi-mode real-time systems upon uniform 
multiprocessor platforms. We propose two transition protocols, specified together with their schedula- 
bility test, and provide the reader with two distinct upper bounds for the length of the transient phases 
during mode transitions, respectively for the cases where jobs priorities are known and unknown be- 
forehand. 

1 Introduction 

Over the years, the sporadic constrained-deadline task model Q has proven remarkably useful for the 
modeling of recurring processes that occur in hard real-time computer application systems, where the 
failure to satisfy any constraint may have disastrous consequences. The problem of scheduling a single 
set of such tasks so that all the deadlines are met has been widely studied in the literature. However, 
many applications exhibit multiple behaviors issued from several operating modes (e.g., an initialization 
mode, an emergency mode, a fault recovery mode, etc.), where each mode is characterized by its own 
set of tasks. During the execution of such multi-mode hard real-time systems, switching from the current 
mode (called old-mode) to another mode (called new-mode) requires to substitute the current executing 
task set with the one of the new -mode. This substitution introduces a transient phase, where the tasks of 
the old-mode may be scheduled together with those of the new-mode, which could lead to an overload 
that can jeopardize the system schedulability. In a multi-mode real-time system, any Mode Change 
Request (MCR) divides the timeline into the alternance of two phases: (i) A steady phase before the 
MCR occurs, and (ii) a transient phase during the mode change. 

In the presence of a MCR, a task t; can be classified according to its behavior during the transition. 
Thus, we distinguish between old-mode and new-mode tasks, see IfTQil for details. If r { belongs to the 
old-mode, then it may need completing its whole execution or it could be aborted at the occurrence of 
the MCR. The abortion is performed when it is feasible without loss of data consistency. In this paper, we 
will assume that every old-mode job must complete its execution when a MCR occurs which is actually 
the worst-case. If T{ belongs to the new-mode, then it could either be a completely new task, that is, 
it does not belong to the old-mode but is active in the new one, or it could be active in both modes, 
but with different or exactly the same parameters in the new mode. In this latter case, it is said to be 
mode-independent. Due to the difficulty to guaranty the schedulability of such tasks, we only consider 
systems without mode-independent tasks in this research. 

If a transition protocol allows the management of mode-independent tasks, then it is said to be with 
periodicity, otherwise it is said to be without periodicity. Moreover if it allows to schedule new-mode 
tasks only when all old-mode ones are completed, then it is said to be synchronous, otherwise it is said 
to be asynchronous. 
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Related work. Up to now, the scheduling of multi-mode hard real-time systems has been much studied, 
particularly upon uniprocessor platforms, where there is only one shared processor available upon which 
all the jobs must be executed IfTTl lTll. Recently extensive efforts have been performed towards extending 
the uniprocessor results to multiprocessor platforms, where there are several shared processors available 
upon which jobs may execute. Sounds results have been obtained in the particular case of identical 
multiprocessor platforms IH3 [9) . 

This research. In this paper, we study the scheduling of multi-mode hard real-time systems upon uni- 
form multiprocessor platforms. We propose two protocols - a synchronous and an asynchronous one - 
for managing the mode transitions. Note that the results presented here also hold for identical multipro- 
cessor platforms as they are a special case of uniform multiprocessor platforms, in which the computing 
capacities of all processors are equal. 

Paper organization. The remainder of this paper is structured as follows. Section [2] presents the 
platform and system model, as well as the scheduler and the mode transition specifications that are 
used throughout the paper. Section [3] provides the reader with some useful definitions and observations. 
Section [^introduces two protocols - a synchronous and an asynchronous one - for managing the mode 
transitions during the execution of a multi-mode hard real-time systems upon a uniform multiprocessor 
platform. Section [5] provides sufficient conditions under which a given system can be executed on a 
given platform without missing any deadline. Section|6]elaborates these conditions for the specific cases 
where jobs priorities are known and unknown beforehand. Section [7] presents experimental results. 
Finally, Section [8] concludes the paper and proposes future work. 

2 Model of computation 

2.1 Multi-mode real-time specifications 

We consider a multi-mode real-time system to be a set of x operating modes M 1 , M 2 , . . . , M x such that 
the operating mode M k has to execute the task set r k = {r k ,r| , • • • ,T k k } consisting of n k tasks by 
following the scheduler S k . Each task r k is modeled by a sporadic constrained-deadline task character- 
ized by three parameters (C*, D\, T k ) where C\ is the Worst Case Execution Time (WCET), D k < T k is 
the relative deadline and T k is the minimum inter-arrival time between two consecutive releases of r k . 
These parameters are given with the interpretation that, during the execution of mode M k , task r k gen- 
erates a certain number of successive jobs r k j with execution requirement of at most C k each, arriving at 

time a k j such that - +1 - • > T k and that must completes within [af df ■) where df ■ = f ■ + D k . 
Job r k - is said to be active if and only if a\ - < t and is not completed yet. More precisely, an active task 
is said to be running at time t if it is allocated to a processor and is being executed. Otherwise the active 
task is in the ready queue of the operating system and it is said to be ready. We denote by active(r k , £), 
run(r k ,t) and ready(r k ,t) the subsets of active, running and ready tasks of r k at time t, respectively. 
Except during the transition phases, we assume that the system always runs in only one mode and that 
all the tasks are independent, i.e., there is no communication, no precedence constraint and no shared 
resource (except for the processors) between tasks. 

At run-time, every task in the system must be enabled before it can generate jobs, otherwise it is 
disabled. When all the tasks in r k are enabled and all the tasks in other modes are disabled, the system is 
said to be running in mode M k . As such disabling r k prevents future job arrivals from r k . We denote the 
subsets of enabled and disabled tasks of r k at time t by enabled(r fe , t) and disabled(r fe , t), respectively. 

We denote a Mode Change Request (MCR) from a given mode, say M\ to a new mode, say M j , by 
MCR(j) and we denote the invoking time of a MCR(j) by t M cR(j) • At the occurrence of a MCR the active 
old-mode jobs are called rem-jobs and must complete their execution as it has been assumed in Section[T] 
Note that the results that we are presenting in this paper also hold when some rem-jobs can be aborted 
at t MC R(j) since such jobs do not jeopardize the system schedulability. 

Because the rem-jobs may cause an overload if the tasks of r j are immediately enabled upon a 
MCR(j), the transition protocols sometimes have to delay the enablement of new-mode tasks until it is 
safe to do so. Consequently, we denote by V 3 k (M i ) the relative enablement deadline of task r° k during the 



transition from mode M l to mode M j , with the interpretation that the transition protocol must ensure 
that r 3 k is not enabled after time £mcr(j) + ^li^ 1 )- The system enters mode M j as soon as all the 
rem-jobs are completed and all the tasks of r j are enabled. 

2.2 Platform specifications 

We consider the scheduling of multi-mode hard real-time systems upon a uniform multiprocessor plat- 
form comprised of m processors. We denote the m-processor uniform platform by tt = [si, s 2 , . . . , s m ] 
where each processor 7^, i = 1,2, ... ,m is characterized by its own speed or computing capacity s i} 
with the interpretation that a job that executes on a processor m for t time units completes Oi • t) 
units of execution. For reasons of clarity and readability we assume without any loss of generality that 
Sj < Sj+i Vj = 1, 2, . . . , m — 1 and si > 0. 

2.3 Scheduler specifications 

We consider that every mode M k uses its own scheduler denoted by S k which can be either Fixed-Task- 
Priority (FTP) or Fixed-Job-Priority (FJP). FTP schedulers assign a priority to each task at system 
design-time (i.e., before the system execution) and then, at run-time, every released job inherits the 
priority of the task it belongs to. Conversely FJP schedulers determine the priority of each job at run- 
time and different jobs of the same task may have different prioritie^J However, for both FTP and FJP 
schedulers, the priority of each job may not change between its release time and its completion time. 
Additionally, these two types of schedulers are assumed to be work-conserving according to the following 
definition. 

Definition 1 (Work-conserving schedulers) A scheduler is said to be work-conserving upon an m-processor 
uniform platform if and only if it satisfies the following conditions: 

• A processor cannot be idle if there are active ready jobs. 

• If at some time instant there are fewer than m active ready jobs (recall that m denotes the number of 
processors in the uniform multiprocessor platform), then the active ready jobs are executed upon the 
fastest processors. That is, at any time instant t if the j'th-slowest processor is idled by the scheduler, 
then the k'th-slowest processor (ik < j) is also idled at t. 

• Higher priority jobs are executed upon faster processors. 

Lemma 1 Let J be any set of synchronous jobs and tt be any uniform platform. Let S denote the schedule 
of J produced on tt by any work-conserving FJP scheduler. If stepj denotes the smallest instant in S where 
at least j processors are idle, then it holds Vj = 2, . . . , m that 

stepj > step J _ 1 (1) 

Proof According to Definition [Tj when a job completes on (or migrates from) any processor itj with 
j e [2, m], the job (if any) executing on processor 7Tj_i migrates to processor ttj. This directly leads to 
stepj > step^ (see Figure [TJ). ■ 

Hereafter, we assume without any loss of generality that every task set r k is schedulable in mode M k 
by the scheduler S k on the m-processor uniform platform n = [si, s 2 , . . . , s m ]. This assumption allows 
us to only focus on the schedulability analysis of the system during the transient phases corresponding to 
mode transitions, rather than on the execution during the modes themselves. 



3 According to these interpretations, the FTP schedulers are a particular case of the FJP schedulers, in which the priorities of 
all jobs issued from the same task are all equal to a same value determined beforehand. 
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Figure 1: Staircase defined by the step^ 
2.4 Mode transition specifications 

During the execution of a multi-mode real-time system in a given mode, say M\ we consider that a 
Mode Change Request MCR(j) to the new mode M j can be initiated by any task of r % or by the system 
itself, whenever it detects a change in the environment or in its internal state. At that time the system 
entrusts the scheduling decisions to the transition protocol. Such a protocol immediately disables all the 
old-mode tasks, which thus prevents the system of new jobs arrival from these tasks. The goal of the 
transition protocol is to complete all the rem-jobs and to enable all the new-mode tasks while meeting all 
the job and enablement deadlines. Once again we recall that we do not consider multi-mode real-time 
systems with mode-independent tasks. This study will be performed under the following assumptions 
during mode transitions: (i) Job migration is permitted (with no penalty). That is, a job that has been 
preempted on a particular processor may resume execution on the same or a different processor; (ii) Job 
parallelism is forbidden. That is, a job may execute on at most one processor at any given instant in time. 

3 Definitions and observations 

Before going any further in this paper, let us provide the reader with some useful definitions and obser- 
vations. 

Definition 2 (A valid protocol) A transition protocol is said to be valid for a given multi-mode real-time 
system if it always meets all the job and enablement deadlines during the transition from any mode of the 
system to any other one. 

Definition 3 (5V) Let tt = [si, s 2 , . . . , s m ] denote an m-processor uniform platform. We define S n as the 
sum of all the processor speeds, i.e., = f YhLi s i- 

Definition 4 (Predictability) Let A denote a scheduler, and let J = { Ji, J 2 , J3, . . .} be a potentially infinite 
set of jobs, where each job Ji = (a;, q, is characterized by an arrival time a i} a computation requirement 
Ci and an absolute deadline di. Let gi (resp. fj denote the time at which job Ji starts (resp. completes) its 
execution when J is scheduled by A. Now consider any set J' = { J[, J' 2 , J3, . . .} of jobs obtained from J as 
follows. Job J{ is characterized by the arrival time a i} a computation requirement c- < q and the absolute 
deadline Let g[ (resp. f[) denote the time at which job J[ starts (resp. completes) its execution when J' 
is scheduled by A. Algorithm A is said to be predictable if and only if for any set of jobs J and any such J' 
obtained from J, it is the case that g[ < gi and f{ < fi Mi. 

Lemma 2 (See (U) Any work-conserving and FJP algorithm is predictable on uniform multiprocessor plat- 
forms. 
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Lemma 3 When a MCR(j) occurs at time t M cR(j) while the system is running in mode M\ every rem-job 
issued from the tasks of V meets its deadline when scheduled by S z upon an m-processor uniform platform. 



Proof From our assumptions, we know that the set of tasks r % of the mode M % is schedulable by S % upon 
an m-processor uniform platform, and from Lemma|2]we know that S l is predictable. When the MCR(j) 
occurs at time £mcro> a U th e tasks of r % are disabled. Disabling these tasks is equivalent to set the 
execution time of all their future jobs to zero, and since S % is predictable the deadline of every rem-job 
is still met. ■ 

Lemma 4 At the occurrence of a MCR(j) for the transition to an operating mode, say from mode M % to 
mode M j , the worst-case scenario (in term of job completion time) is the one where all the r em-jobs issued 
from the tasks of r l are released simultaneously upon MCR(j) with a computation requirement equals to 
their WCET each. 

Proof The property is straightforward from Lemma[2]and the fact that we only consider work-conserving 
schedulers in each operating mode. These ones are predictable. ■ 

Definition 5 (Makespan) Let J = { Ji, J 2 , . . . , J n } be a set of n jobs, all released at time t = 0, with 
computation requirements Ci, C 2 , . . . , C n , respectively. Let tt = [s±, s 2 , . . . , s m ] denote an m-processor 
uniform platform and A be any scheduling algorithm. If S denotes the schedule of J produced by A upon tt 
then the makespan is the earliest instant in S at which all jobs of J are completed. 

Very often, and especially when job priorities are unknown beforehand, determining the makespan 
of a set of jobs is a very challenging problem in scheduling theory. In the literature, extensive efforts 
have been made for the minimum makespan scheduling problem - that is, to find a priority assignment 
for all the jobs of J such that the makespan is minimized upon a given m-processor platform. Following 
the naming scheme introduced by Graham et al.Q, this problem is referred to as P||Cmax. However 
in this paper, we will focus on the maximum makespan that could be produced by a given set of n jobs 
(all release at a same time), scheduled according to any work-conserving scheduler upon an m-processor 
uniform platform. 

For a given set of jobs, an intuitive idea for maximizing the makespan upon an m-processor uniform 
platform would be to execute, at any time, the longest ready job upon the slowest available processor, 
i.e., the shorter the computation requirement of a job, the higher its priority. However, we can show that 
this intuitive idea is erroneous, unfortunate^ An FJP assignment leading to the maximum makespan 
remains an open question. 

Another intuitive idea would be to naively extend one of the results proposed in [9] for an m- 
processor identical platform, i.e., 

Lemma 5 (Lemma 5 in [9]) Let J = { J 1? J 2 , . . . , J n } be a set of n jobs, all released at time t = 0, 
with computation requirements Ci, C 2 , . . . , C n respectively, such that C\ < C 2 < • • • < C n . Suppose that 
these jobs are scheduled upon m identical processors by a work-conserving scheduler S. Then, whatever the 
priority assignment of jobs, an upper bound on the makespan is given by 

C n if m > n 

upms( J, m) d = \ \ n / \\ (2) 



Naively extending Expression [2] leads to 



Ci + ( 1 j • C n otherwise 



Cn/Sm-n + l if m > 71 



upms (J,7r) d = <{ 1 n , 1 1 x (3) 
-FT/. C i+\ — ) • C n otherwise 

and we can show that the intuitive idea used to derive this bound does not extend to uniform platforms, 
unfortunatel}(^J 

4 On the 2-processor identical platform tt = [1,1], the set of jobs J = { Ji, J2, J3, J4}, all released at time t = and such that 
C\ = 2, C2 = 3, C3 = 5 and C4 = 7 provides a makespan of 10 when J\ > J2 > J3 > J4, whereas the priority assignment 
J3 > J\ > J 2 > J a leads to a makespan of 12. 

5 On the 3-processor platform 7r = [1,2,100], the set of jobs J = {Ji, J2, J3}, all released at time t = and such that 
Ci = 10, C2 = 10 and C3 = 100 provides a maximum makespan of 1.1968, reached when J\ > J2 > J3. However, Expression |3} 
provides upms (J,7r) = 1.194175 < 1.1968. 



Now we are aware that neither the "Shortest- Job-First" policy nor upms ( J, tt) lead to the maximum 
makespan. In Section[4| we present the protocols SUM-MSO and AUM-MSO that are generalizations to 
uniform multiprocessor platforms of the protocols SM-MSO and AM-MSO respectively, defined for iden- 
tical multiprocessor platforms [9]. Then, we provide in Sections 6J_ and |6.2| two distinct upper bounds 
on the maximum makespan, for the cases where jobs priorities are known and unknown beforehand, 
i.e., FTP and FJP schedulers, respectively. 



4 Protocols SUM-MSO and AUM-MSO 

SUM-MSO. The protocol SUM-MSO which stands for "Synchronous Uniform Multiprocessor Minimum 
Single Offset" is an extension to uniform multiprocessor platforms of the protocol SM-MSO defined 
for identical multiprocessor platforms [9j to manage the rem-jobs during transition between any two 
operating modes. The main idea of SUM-MSO is the following: upon a MCR(j), every task of the current 
mode (say M % ) is disabled and the rem-jobs continue to be scheduled by S l upon the m processors. When 
all of them are completed, all the new mode tasks (i.e., the tasks of r j ) are simultaneously enabled. We 
refer the interested reader to (9) for a pseudo-code of this protocol. 



AUM-MSO. The protocol AUM-MSO which stands for "Asynchronous Uniform Multiprocessor Mini- 
mum Single Offset" is an extension to uniform multiprocessor platforms of the protocol AM-MSO de- 
fined for identical multiprocessor platforms [9] to manage the rem-jobs during transition between any 
two operating modes. The main idea is the following: upon a MCR(j), reduce the enablement delay 
applied to new-mode tasks by enabling them as soon as possible. Here, rem-jobs and new-mode tasks 
can be scheduled simultaneously during the transition phases according to the scheduler S trans with the 
following rules: {%) the priorities of the rem-jobs are assigned according to the old-mode scheduler; (n) 
the priorities of the new-mode tasks are assigned according to the new-mode scheduler, and (m) every 
rem-job always has a higher priority than every new-mode task. 

Upon a MCR(j), all the old-mode tasks, say of mode M\ are disabled and the rem-jobs continue 
to be scheduled by S\ Whenever the lowest priority rem-job migrates to a faster processor due to the 
completion of a higher priority one, (say at time i), some processors become available and thus the 
protocol AUM-MSO immediately enables some new-mode tasks; contrary to the protocol SUM-MSO 
which waits for the completion of all the rem-jobs. In order to select the new-mode tasks to enable at 
time t, AUM-MSO uses the following heuristic: it considers every disabled new-mode task in increasing 
order of their enablement deadline and it enables those which can be scheduled by S j upon the current 
available CPUs (i.e., the CPUs which are not running a rem-job and which are therefore available for 
executing some new-mode tasks). 

Let 7r = [si, s 2 , . . . , Sm] be an ra-processor uniform platform with processor capacities such that sj < 
Sj +1 for all j, 1 < j < m — 1. Let S be any work-conserving FJP scheduler. Let r £ be a set of tasks. We 
denote by tt s (t £ ) the subset of processors running a job of r £ when r £ is scheduled by S upon platform 
7r. We denote by CPU(7r, S, t £ ) the binary function defined by: 

nnTT/ ^ def ( 1 if r £ is schedulable by S upon ir 

CPU(7r,5,r ) = | o otherwise 

This function is useful as we must always guarantee that all the deadlines are met for all the jobs in the 
system. To the best of our knowledge, there is no efficient necessary and sufficient schedulability test for 
most multiprocessor schedulers upon uniform platforms. However sufficient schedulability tests exist for 
scheduler such as EDF and DM EE!. Algorithm [T] gives the pseudo-code of the AUM-MSO protocol in 
a more formal way. 



5 Validity tests for protocols SUM-MSO and AUM-MSO 

In the previous section we have defined the transition protocols SUM-MSO and AUM-MSO. Now, we 
need to establish a validity test - that is, a condition based on the tasks and platforms characteristics that 
indicates a priori whether the given system will always comply its expected requirement during every 



Algorithm 1: AUM-MSO protocol 

Input: M % \ old-mode; M- 7 : new-mode 
Output: a safe release of the new-mode tasks 
begin 

Assign priorities to jobs according to S trans ; 

Sort disabled (r- 7 , t) by increasing enablement deadlines ; 

7T° ld <- 7T J 

7r new <- ; 

while (ir old / 09 do 

At job (say J&) completion time t, a subset (say 7r avl = {tt S: . . . , 7Tf }) of (/ — s + 1) slowest processors may 
become available: 

if ( J fc E t* and ready (r\t) = 0) then 
7T old <- 7T old \7r avl ; 

7T neW <- 7T neW U 7T avl J 

forall G disabled (t j ',£) do 

r tem P ^_ enabled^', t) U {t£} ; 
if (CPU(7r new , Si, r tem P) / 0) then 
|_ enable r 3 r ; 

if (active(T l , t) = 0J then enter mode M- 7 ; 

end 



mode change. To do so, we proved in Lemma [3] that disabling the old-mode tasks upon a MCR does 
not jeopardize the schedulability analysis of the rem-jobs, when they continue to be scheduled by using 
the old-mode scheduler specifications upon the m processors. In Lemma [4] we defined the worst-case 
scenario. 



5.1 Validity test for SUM-MSO 

Thanks to Lemma [3j the deadline of every rem-job is always met while using SUM-MSO during the 
transition phases. Thereby SUM-MSO is valid for a given multi-mode real-time system if, for every 
mode change, the maximal transition delay which could be produced by the rem-jobs is not larger than 
the minimal enablement deadline of the new-mode tasks. Thanks to Lemma [4j the transition delay 
which is actually equal to the completion time of all the rem-jobs is maximal when they are released 
simultaneously with execution requirements equal to their WCETs. This leads to the following validity 
test. 

Validity Test 1 For any multi-mode real-time system r and any uniform platform ir, protocol SUM-MSO is 
valid provided Mi, j with i ^ j: 

upms(r\7r)< min (vUM 1 )] 



where upms(V, ir) is an upper-bound on the makespan and is defined in Sections 6.1 and 6.2 for both FTP 
and FJP schedulers, respectively. 

5.2 Validity test for AUM-MSO 

The main idea to know whether AUM-MSO is valid for a given system r and platform ir is to simulate 
Algorithm [T] for every possible mode transition, while considering the worst-case scenario for each one - 
the scenario where the new-mode tasks are enabled as late as possible. From our definition of protocol 
AUM-MSO, we know that every instant at which some new-mode tasks are enabled corresponds to an 
instant at which a processor has no more rem-job to execute, i.e., the "step instants" step^- of the staircase 
depicted in Figure jl] Consequently, the largest instants at which new-mode tasks could be enabled are 
the upper-bounds step ■ on the instants step • and can be determined by considering only the schedule of 



the rem-jobs. These upper-bounds are defined for both FTP and FJP schedulers in Sections |6J] and [6^2 
respectively. Notice that it results from this notation that step m = upms(V,7r) and the validity test for 

SUM-MSO can be rewritten as step m < mini< fe < nj (V J k (M i )) Vi, j with i ^ j. 



The details for the validity of the transition protocol AUM-SMO are provided by Algorithm [2j The 
correctness of our validity algorithm derives directly from the fact that every instant at which a new- 
mode task is enabled in Algorithm [2] is as large as possible. Notice that, since our validity test considers 
only the worst-case scenario for every mode transition, it could be some time-instants (in any mode 
transition) during the actual execution of the system at which the set of already enabled tasks benefits 
from a larger number of available processors than in the worst-case scenario. However, we prove in 
Lemma [6] that it does not jeopardize the system schedulability. 

Lemma 6 Any predictable and work-conserving scheduler that is able to schedule a task set r upon a uniform 
platform tt = [si, . . . , s m ) is also able to schedule r upon any platform tt* such that tt C tt*. 

Proof The proof is made by contradiction. To do so, it is sufficient to show the Lemma for 7r* = 
[si, . . . , s m , s*] where s* > s m . Suppose there exists a task set r that is schedulable with a predictable 
and work-conserving scheduler S upon tt, but not upon 7r* D tt. Consider the schedule of a particular 
instance 1 of r upon 7r* leading to a deadline miss, and let X* be another instance of r derived from 1 
reducing each job requirement by the amount of time each job executes upon the sub-platform 7r*\7r, i.e., 
upon 7r*. Since the scheduler is work-conserving, the schedule of 1 by S upon the processors in common 
with 7r is the same as the one that would be produced by S for X* upon platform ix. Since a deadline 
is missed in the schedule of 1 upon 7r*, then a deadline is missed also in the schedule of X* upon tt. 
But since the scheduler is predictable, a deadline would be missed on tt even with the more demanding 
instance 1, leading to a contradiction. The lemma follows. ■ 



Algorithm 2: Validity Test for AUM-MSO 

Input: A multi-mode hard real-time system r = {r 1 , r 2 , . . . , r x } 

Output: a Validity Test of the transition protocol 

begin 

forall i, j G [l,x] such as i / j do 

^disabled ^ ^.j . 

^.enabled ^ . 

Sort r dlsabled by increasing enablement deadlines ; 
for (k = 1; k < m; k + +) do 
forall 4 e r disabled do 

if V 3 r (M i ) < step fe then return False ; 

r tem P ^_ ena bled(T^', t) U {4} ; 

7r new ^ ttV 5 '^) ; 

if CCPU(7r new , si, r tem P) / 0) then 

^.enabled ^ ^.enabled y _f^_ y . 

^disabled _^ ^disabled j. • 

return True ; 

end 



In the next sections, we determine the upper-bounds step^, Vj = 1, 2, . . . , m for both FTP and FJP 
schedulers. 



6 Determination of the upper-bounds step^ 

6.1 Upper-bounds for FTP schedulers 

We recall that for FTP schedulers job priorities are known beforehand. 

Definition 6 The time-instant denotes the earliest instant in the schedule of the i highest priority jobs 
Ji, . . . , Ji where at least j processors are idle (the processors tt\, . . . , itj, since we consider work-conserving 
schedulers). 

In Theorem [l] we provide the exact values of t % - (V i e {1,2, ... ,n} and V j e {1,2,..., m}) when 
each job executes for its WCET. As such we provide the exact value of t m which corresponds to the exact 
makespan for the scheduling of J = {Ji, . . . , J n } upon the platform tt = [si, . . . , s m ]. 



Theorem 1 Let J = { Ji, J 2 , . . . , J n } be a set of n jobs, all released at time t = 0, with computation require- 
ments Ci, C 2 , . . . , C n , respectively. Suppose that these jobs are scheduled according to a work-conserving 
FTP scheduler. Suppose that J is ordered in decreasing-priority order then t\ is inductively defined as 
follows: (initialization) t® = 0, Vj < m and = oo, Mi, (iteration) 



*} = < 



t)r + \ dse if d > ELi (*m " ' ^ 

+ - • ( Q - - • J otherwise 



Proof Initially, the m processors are idle, consequently t® = 0, Mj < m. We find convenient to define 

def 

t l m +i = oo, Mi, which means that we have at most m processors available. 

Now we will prove the correctness of the value of t % - (Mj < m) assuming that t l ~ x are defined (Vj < 
m + 1). The time-instants t l ~ x define a staircase as illustrated in Figure [2] for the scheduling of jobs 
Ji , . . . , Ji-i. As such, job Ji can only progress during the grey areas. Consequently we have to distinguish 
between two cases: 

1. ty 1 = t l j^\, i.e., at least one faster processor becomes available at time t % ~ x (the grey area on 
processor ttj is void in that case), the job Ji will be executed (if not completed) upon a faster pro- 
cessor, consequently the first time-instant where at least j processors are idle remains unchanged 

and t) =t i ~ 1 . 

2. Otherwise, Ji will be scheduled upon processor ttj while no faster processors become available 
or Ji completes. Remark that ^=1(^+1 _ ' s t corresponds to the grey area on processors 
7ri , . . . , 7Tj . Hence the two subsequent sub-cases follow. 




Figure 2: Staircase defined by the t % - 1 



Corollary 1 Each instant t 7 - (Mj = 1, 2, . . . , m) defined in Definition [6] is an upper-bound on the ''step- 
instant 7 ' stepj defined in Lemma^\i.e., step^- < t 7 - (Mj = 1,2, .. . ,m). Therefore, the instants t 7 - (Mj = 
1, 2, . . . , m) computed in Theorenuncan be used as the instants step,,- in the validity test provided by Algo- 
rithm^ 

Proof From Theorem [I] the instants t 7 - (Mj = 1, 2, . . . , m) are derived from the schedule in which ev- 
ery job executes for itswCET (we denote this "worst-case" schedule S wc hereafter). Now, suppose by 
contradiction that in the actual schedule 5 act (during the system execution), there exist j G [1, m] such 



that stepj in S act is strictly larger than t™ from 5 WC . This implies that, within the time interval [t 7 -, step^[, 
there are at least (m - j + 1) running jobs in 5 act while there are at most (m - j) running jobs in S wc . 
Therefore, within [t 7 -, step^ \, at least one job (say Jg) is not completed yet in S act whereas it is already 
completed in S wc . But since we consider only work-conserving schedulers and since in S act the execution 
requirement of Jt can only be lower than or equal to that in £ wc , the fact that J> completes later in S act 
than in 5 WC leads to a contradiction with the predictability ■ 



6.2 Upper-bounds for FJP schedulers 

We recall that for FJP schedulers job priorities are unknown beforehand. We assume without any loss 
of generality that we always have m < n as the problem in the case where m > n reduces to the same 
problem upon the n fastest processors. In Lemma [7J we first determine a lower bound on the smallest 
instant in the schedule of J where at least j CPUs (with j = 1, 2, . . . , m) are idle. Then in Theorem [2] 
we determine an upper bound on the maximum makespan that could be produced by J, this is given by 
step m . 

Lemma 7 Let J = { J 1? J 2 , . . . , J n } be a set of n jobs with computation requirements Ci, . . . , C n , respec- 
tively, such that C\ < • • • < C n . A lower bound Lj on the smallest instant step^ at which at least j CPUs 
(with j = 1, 2, . . . , m) are idle is given by 

^ n — m-\-j m 

Lj d = — • V C k where S n d = ^ s» (4) 

^ fc=i i=i 

Proof For the schedule S obtained from a work-conserving FJP scheduler, let step^- denote the smallest 
instant in S at which at least j processors are idle. According to Definition [T] at most (m - j) jobs are 
not completed at time step^, meaning that at least (n — m + j) are already completed. If J' denotes 
any subset of r > (n — m + j) jobs of J, then a lower bound t on the instant at which the r jobs of J' 

are completed is given by t = — - • ^ Obviously, since C\ < C 2 < . . . < C n , t is minimal for 

J' = { Ji, J 2 , . . . , J n -m+j}, i.e., t = Lj. The lemma follows. ■ 

Theorem 2 Let J = { J 1? J 2 , . . . , J n } be a set of n jobs with computation requirements Ci, . . . , C n , respec- 
tively, such that C\ < • • • < C n . An upper bound step^- on the smallest instant at which at least j CPUs 
(with j = 1, 2, . . . , m) are idle is given by 

ste^. d ^ E ^ =1 Cfc ~ ^ Lk • Sfc (5) 

Proof Consider the following notations: (i) S denotes the schedule of the n jobs obtained from a work- 
conserving FJP scheduler; (ii) step^ (with j = 1, 2, . . . , m) denotes the smallest instant in S at which at 
least j processors are idle, and (m) Wj denotes the amount of work executed on CPU ixj within [0, step,,], 

i.e., Wj = f step ■ -sj. Let k be any integer in [1, m] and suppose by contradiction that step fc > step fc . By 
definition of the Wj, we know that 

m n 

Furthermore, we know that Sj=i Wj = YJj=i ste Pj ' s j = X]j=i( ste Pj ' s j) + DjL/c( ste Pj Since we 
know from Lemma [T] that we have step J+1 > step^ Vj = l,2,...,ra — 1, it holds that 

m k — 1 m 



By assumption we have step fe > step fe , leading to 



fc-i 

Yl w * > Yl ( step i ) + s ^Pfe ■ XI ^ 

fc — 1 n si — 1 t ttl 

> Z^( step i + — : l^ s i 

n fc — 1 

> X C ^ + H (( ste Pi • s 

Since from Lemmamit holds that Lj < step^ Vj = 1, 2, . . . , m, it yields Sj=i > Ej=i Q leading to 
a contradiction witnEquality[6j The theorem follows. ■ 

For experimental purpose, let us recall the definition of the parameter A^ for an m-processor 
uniform platform it = [si, s 2 , . . . , s m ]: A^ = f maxJ / L 1 | S&=i 5fc j. Note that parameter A^ measures the 
"degree" by which ir differs from an identical multiprocessor platform. 



7 Experimental results 



In this section, we report on the results of experiments conducted using the theoretical results presented 



in Section [6^2] (since the upper-bounds presented in Section |6J] can be considered as exact if every job 
executes for its WCET). The considered set of jobs J is composed of 10 jobs of undetermined priority and 
the platform ir is composed of 4 processors with computing capacities varying within [1, 101] with an 
increment of 10. 

During the simulation, all possible combinations of the processors speeds are considered for the 4 
CPUs. For every assignation of processors speed, we determine the corresponding parameter A^ as well 
as the error E(J,tt) (expressed in percent) of upms( J, n) compared to the exact value of the maximum 
makespan (which is determined by considering the schedules derived from every job priority assign- 
ment). Finally, the errors E( J, n) are displayed relative to the corresponding A^ in Figure [5] 



Approximation error on the makespan (%) 




Figure 3: Simulation results 



The most important error that we obtained is 10.64% and the minimal one is 2.28%. The average 
error is 7.78% with a squared distance of 2.32%. Hence, we believe that this is a promising path to go for 
more competitive bounds and for practical use. 



8 Conclusion and Future work 

In this paper, the scheduling problem of multi-mode real-time systems upon uniform multiprocessor 
platforms is studied. Two protocols for transitioning between every pair of operating modes of the system 
are specified together with their validity tests. The first proposed protocol SUM-MSO is synchronous in 
the sense that the tasks of the old- and new-mode are not scheduled simultaneously. The second protocol 



AUM-MSO is asynchronous in the sense that it allows old- and new-mode tasks to be scheduled together. 
This study led us to provide the reader with tight bounds for the length of the transient phases during 
mode transitions. Future work will focus on handling mode-independent tasks, i.e., tasks whose behavior 
is not affected by the mode changes. 
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